This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json) Hash identifier: 2Z+XYydHVn5eyGD33FaSI/geyPHFRwHtVD+yli8DzkU= Subject key identifier: 27:E1:C2:97:BE:8B:7B:A5:35:6D:D4:D7:06:26:88:0B:D5:6D:16:83 Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43 Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43 Certificate serial: 019B465D5764D724D9D4E100D01C209C5CA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 14:01:20 +0000 Manifest this update: Mon 22 Dec 2025 14:01:20 +0000 Manifest next update: Tue 23 Dec 2025 14:01:20 +0000 Files and hashes: 1: 0iqw0_DRAXXz4sreW3NPTcIykK8.roa (hash: upy176yocnlw3ZFcrVK6vEr280ZPGUhzh/TpTxnYSg8=) 2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: qO4Z6BauAnD8hvIIXIFzp6kYlW9UTWK58ZD5xAvdbYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:57:64:d7:24:d9:d4:e1:00:d0:1c:20:9c:5c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43 Validity Not Before: Dec 22 14:01:20 2025 GMT Not After : Dec 23 14:01:20 2025 GMT Subject: CN=27e1c297be8b7ba5356dd4d70626880bd56d1683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:45:06:a6:c4:e1:ec:96:bd:90:58:19:99:35: 97:77:f6:52:ec:75:79:83:cc:8a:74:46:c0:98:08: df:41:1e:6d:75:d2:c1:d4:a9:da:3b:6b:d0:11:bc: 66:43:1e:48:d1:c6:08:70:a3:1f:a1:2e:f8:f3:45: a6:95:4f:8b:6a:12:e8:a0:bd:3b:1d:3f:4f:68:8b: f9:2a:05:29:6e:83:93:3f:e6:b4:73:b7:de:e4:bb: 4c:c5:60:92:7e:61:88:75:b6:d4:d3:b7:52:c5:17: 2b:84:57:17:bc:3c:65:c2:dd:15:2b:39:51:72:b6: 5c:94:6b:31:81:46:5b:79:63:73:04:63:00:12:1d: 56:24:9e:5d:df:00:28:9e:e3:b0:d4:a5:c6:89:73: 45:f3:e9:fe:da:26:c5:91:e2:94:c5:e6:e0:77:6e: ab:c3:b2:ea:6d:7c:85:7d:74:0e:9f:49:c0:4c:aa: 04:99:83:05:6b:7b:7d:8f:d9:23:dc:f7:26:7c:51: 85:2d:ab:4a:95:41:9a:6c:32:c0:eb:96:c7:2c:d8: 4f:d2:c2:25:74:59:b8:0d:ee:1f:8e:42:5d:24:cf: 2f:74:dd:e0:af:3a:57:3c:6c:f3:d1:8a:55:f1:03: 13:4d:a3:2e:cf:f5:ea:02:70:95:c0:e8:66:47:95: 8a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E1:C2:97:BE:8B:7B:A5:35:6D:D4:D7:06:26:88:0B:D5:6D:16:83 X509v3 Authority Key Identifier: keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:91:a8:a2:54:d8:69:7d:b2:d5:9b:d0:d1:6d:61:f3:2b:47: 73:64:a7:1a:39:1f:4d:8f:b2:ee:55:31:f4:c9:8a:27:9b:8b: fd:9a:a5:39:82:e3:3c:eb:cb:c1:db:cb:56:80:bb:80:11:80: 20:85:b9:af:bf:0b:df:ae:80:99:fd:b1:46:d4:fc:1e:d8:5e: 3a:1e:e2:8c:68:00:6a:76:b6:69:5a:2d:4f:df:f2:cc:20:ce: 6e:76:84:3c:b0:ac:09:8e:64:a4:54:d5:18:d8:21:e5:87:c5: 24:4c:07:bc:0d:b8:ca:cf:9c:8c:f9:b2:55:d4:a5:31:b9:86: 93:76:f6:83:ce:db:3a:2c:50:8d:e7:f8:22:9b:3d:9f:92:14: 8c:6f:b2:96:17:48:e2:44:8c:74:4d:7b:6d:b0:b4:78:2a:9e: 5b:33:c2:22:12:63:ff:1c:ac:a8:c2:50:21:f9:f3:0c:27:0a: 1b:14:b6:89:11:3d:60:59:0b:50:e3:79:e0:e5:12:7e:d9:fc: f8:f8:e2:d2:a9:7d:e8:8a:60:59:42:fc:06:df:87:55:48:65: 23:6e:cf:dc:28:a0:c7:0a:9b:02:00:3a:47:90:dd:7d:20:59: 61:31:2a:5e:d8:6f:36:bd:44:89:5b:78:9a:63:bc:f2:4f:91: ea:e4:df:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXVdk1yTZ1OEA0BwgnFypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZjQwZWY3ZjEzZWM5YTE1NmVmYjBkYjM5NjA5MGJjNzVk YTlkNDMwHhcNMjUxMjIyMTQwMTIwWhcNMjUxMjIzMTQwMTIwWjAzMTEwLwYDVQQD EygyN2UxYzI5N2JlOGI3YmE1MzU2ZGQ0ZDcwNjI2ODgwYmQ1NmQxNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkUGpsTh7Ja9kFgZmTWXd/ZS7HV5 g8yKdEbAmAjfQR5tddLB1KnaO2vQEbxmQx5I0cYIcKMfoS7480WmlU+LahLooL07 HT9PaIv5KgUpboOTP+a0c7fe5LtMxWCSfmGIdbbU07dSxRcrhFcXvDxlwt0VKzlR crZclGsxgUZbeWNzBGMAEh1WJJ5d3wAonuOw1KXGiXNF8+n+2ibFkeKUxebgd26r w7LqbXyFfXQOn0nATKoEmYMFa3t9j9kj3PcmfFGFLatKlUGabDLA65bHLNhP0sIl dFm4De4fjkJdJM8vdN3grzpXPGzz0YpV8QMTTaMuz/XqAnCVwOhmR5WKFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfhwpe+i3ulNW3U1wYmiAvVbRaDMB8GA1UdIwQY MBaAFLn0DvfxPsmhVu+w2zlgkLx12p1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQt ZmM1NTkwY2I4ZjZiLzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lNzcyNWQtNGMxNi00ODY3LThjNGQtZmM1NTkwY2I4ZjZi LzEvdWZRTzlfRS15YUZXNzdEYk9XQ1F2SFhhblVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZGoolTY aX2y1ZvQ0W1h8ytHc2SnGjkfTY+y7lUx9MmKJ5uL/ZqlOYLjPOvLwdvLVoC7gBGA IIW5r78L366Amf2xRtT8HtheOh7ijGgAana2aVotT9/yzCDObnaEPLCsCY5kpFTV GNgh5YfFJEwHvA24ys+cjPmyVdSlMbmGk3b2g87bOixQjef4Ips9n5IUjG+ylhdI 4kSMdE17bbC0eCqeWzPCIhJj/xysqMJQIfnzDCcKGxS2iRE9YFkLUON54OUSftn8 +Pji0ql96IpgWUL8Bt+HVUhlI27P3CigxwqbAgA6R5DdfSBZYTEqXthvNr1EiVt4 mmO88k+R6uTfcQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:42:13 2025 by rpki-client